ci: run against multiple openssl versions

Author: santiagorodriguez96

.github/actions/install-openssl/action.yml

@@ -27,6 +27,18 @@ runs:
           ./Configure --prefix=$HOME/openssl --libdir=lib linux-x86_64
           make depend && make -j4 && make install_sw
           ;;
+        3.*)
+          OPENSSL_COMMIT=openssl-
+          OPENSSL_COMMIT+=$(echo ${{ inputs.version  }})
+          git clone -b $OPENSSL_COMMIT --depth 1 https://github.com/openssl/openssl.git .
+          echo "Git commit: $(git rev-parse HEAD)"
+          if [[ ${{ inputs.version }} == 3.5* ]]; then
+            ./Configure --prefix=$HOME/openssl --libdir=lib enable-fips no-tests no-legacy
+          else
+            ./Configure --prefix=$HOME/openssl --libdir=lib enable-fips no-tests
+          fi
+          make -j4 && make install_sw && make install_fips
+          ;;
         *)
           echo "Don't know how to build OpenSSL ${{ inputs.version }}"
           ;;

.github/actions/install-ruby/action.yml

@@ -3,6 +3,9 @@ inputs:
   version:
     description: 'The version of Ruby to install'
     required: true
+  openssl-version:
+    description: 'The version of OpenSSL used'
+    required: true
 runs:
   using: 'composite'
   steps:
@@ -11,7 +14,7 @@ runs:
       uses: actions/cache@v4
       with:
         path: ~/rubies/ruby-${{ inputs.version }}
-        key: ruby-${{ inputs.version }}-openssl-1.1.1w
+        key: ruby-${{ inputs.version }}-${{ inputs.openssl-version }}
 
     - name: Install Ruby
       if: steps.ruby-cache.outputs.cache-hit != 'true'
@@ -52,7 +55,7 @@ runs:
         GEMFILE: ${{ env.BUNDLE_GEMFILE || 'Gemfile' }}
       with:
         path: ./vendor/bundle
-        key: bundler-ruby-${{ inputs.version }}-${{ hashFiles(env.Gemfile, 'tpm-key_attestation.gemspec') }}
+        key: bundler-ruby-${{ inputs.version }}-${{ inputs.openssl-version }}-${{ hashFiles(env.Gemfile, 'tpm-key_attestation.gemspec') }}
 
     - name: Install dependencies
       shell: bash

.github/workflows/build.yml

@@ -24,21 +24,31 @@ jobs:
           - '2.7'
           - '2.6'
           - '2.5'
-          - truffleruby
+        openssl:
+          - '3.4.1'
+          - '3.3.3'
+          - '3.2.4'
+          - '3.1.8'
+          - '3.0.16'
+          - '1.1.1w'
+        include:
+          - ruby: truffleruby
+
     steps:
     - uses: actions/checkout@v4
 
     - name: Install OpenSSL
       if: matrix.ruby != 'truffleruby'
       uses: ./.github/actions/install-openssl
       with:
-        version: "1.1.1w"
+        version: ${{ matrix.openssl }}
 
     - name: Manually set up Ruby
       if: matrix.ruby != 'truffleruby'
       uses: ./.github/actions/install-ruby
       with:
         version: ${{ matrix.ruby }}
+        openssl-version: ${{ matrix.openssl }}
 
     - name: Set up Ruby
       if: matrix.ruby == 'truffleruby'